An overview of the regulatory environment for data privacy protection in China, and in particular the issues that businesses operating in China or dealing with Chinese counterparts need to be aware of and what they should do to ensure compliance and minimize risk when handling personal information in China. The article includes a table setting out the criminal offences and penalties for breaches of Chinese data privacy legislation as well as an overview of the civil liability that can apply.